Security Bulletin: Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Summary Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18. Vulnerability Details...

CVE-2026-110720

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18...

CVE-2026-110720 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18...

CVE-2026-110720

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18...

CVE-2026-110720

Consul-k8s versions 0.42.0 and later are susceptible to a cross-namespace authorization bypass within component ACL binding rules . This vulnerability allows an attacker to potentially obtain elevated Consul privileges . The issue is addressed in versions 2.1.0 and 1.8.18 . No specific exploit de...

CVE-2026-110720 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18...

EUVD-2026-110070

Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18...

Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules

Summary Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding rules that may allow an attacker to obtain elevated Consul privileges. This vulnerability CVE-2026-110720 is fixed in consul-k8s 2.1.0 and 1.8.18. Background When system...

HashiCorp Tooling authorization issue vulnerability

Versions 0.42.0 through 2.0.4 of HashiCorp Tooling contain an authorization issue vulnerability. This vulnerability stems from a cross-namespace authorization bypass in component ACL binding rules, potentially allowing attackers to gain elevated Consul privileges...

PT-2026-125089

Name of the Vulnerable Software and Affected Versions consul-k8s versions 0.42.0 through 1.8.17 consul-k8s versions 2.0.0 through 2.0.9 Description A cross-namespace authorization bypass exists in the ACL binding rules component. This issue may allow an attacker to obtain elevated Consul...